Skip to main content
POST
/
api
/
v1
/
apps
/
{app_id}
/
connectors
/
{connector_id}
/
tool_bindings
/
by_tools
Typescript (SDK)
import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript";

const conductoroneSDKTypescript = new ConductoroneSDKTypescript({
  security: {
    bearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
    oauth: "<YOUR_OAUTH_HERE>",
  },
});

async function run() {
  const result = await conductoroneSDKTypescript.mcpAccessProfileToolBinding.getAccessProfilesForTools({
    appId: "<id>",
    connectorId: "<id>",
  });

  console.log(result);
}

run();
{
  "accessProfilesForTools": [
    {
      "accessProfiles": [
        {
          "appEntitlementId": "<string>",
          "appId": "<string>",
          "connectorId": "<string>",
          "createdAt": "2023-11-07T05:31:56Z",
          "deletedAt": "2023-11-07T05:31:56Z",
          "description": "<string>",
          "displayName": "<string>",
          "id": "<string>",
          "toolCount": 123,
          "updatedAt": "2023-11-07T05:31:56Z"
        }
      ],
      "mcpToolId": "<string>"
    }
  ]
}

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Authorization
string
header
required

This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.

Path Parameters

app_id
string
required

App identifier.

connector_id
string
required

Connector identifier.

Body

application/json

MCPAccessProfileToolBindingServiceGetAccessProfilesForToolsRequest requests the access profiles bound to a batch of MCP tools.

mcpToolIds
string[] | null

MCP tool IDs to look up. Sized to match frontend MultiGet batch size.

Response

200 - application/json

MCPAccessProfileToolBindingServiceGetAccessProfilesForToolsResponse returns access profiles grouped by MCP tool.

MCPAccessProfileToolBindingServiceGetAccessProfilesForToolsResponse returns access profiles grouped by MCP tool.

accessProfilesForTools
Access Profiles For Tool · object[] | null

One entry per requested MCP tool. Tools with no bindings are still included with an empty access_profiles list, so callers can distinguish "no bindings" from "tool not requested" in the multi-get cache.